$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json) Hash identifier: y8VUO3B8wDrcucTWsGhVpFAp93aqpE+WJHEf5ziFmic= Subject key identifier: DD:EB:67:B5:20:DB:BD:CF:E5:02:D8:77:6B:21:36:78:70:ED:D4:DA Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Certificate serial: 03F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft Manifest number: 03E6 Signing time: Sat 23 Nov 2024 00:11:50 +0000 Manifest this update: Sat 23 Nov 2024 00:11:50 +0000 Manifest next update: Sat 30 Nov 2024 00:11:50 +0000 Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: fFenyu1VAxzuo4rBs2rdqGtSIu/KRFhDLvEDuZPEEXU=) 2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: mx4DNBMtrIqGJPKG4BoTOV4N4i0hZnjpy07RfH48zs0=) 3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: a+5DHZllHj2t4pWMl/jcv7gobKLpcocfFIGeisUrfj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1012 (0x3f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E Validity Not Before: Nov 23 00:11:50 2024 GMT Not After : Nov 30 00:11:50 2024 GMT Subject: CN=67411dc6-0fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:26:dc:8f:7b:4f:7f:f0:9e:05:fd:87:6c: c8:d9:24:bd:01:6f:a3:94:85:cd:37:87:92:dc:f3: 17:a9:b5:55:59:f0:27:36:e1:9d:3c:35:3b:65:3c: 6d:d9:5a:60:1a:4f:1a:93:57:8b:a4:c7:d2:49:df: f3:b2:cc:5a:3b:7d:49:f8:fe:1b:76:54:60:4d:7f: 2f:09:8d:61:c6:8a:6b:39:7b:3b:2e:1d:0c:08:25: 25:8d:dc:8c:3b:ad:6a:b0:95:6f:28:72:54:0c:80: fd:dd:7b:cf:12:f0:77:1b:98:17:37:d3:fe:a7:54: e4:c8:50:d8:ec:1c:56:7b:f7:bb:77:da:41:67:78: 6f:7f:0e:e2:c3:f0:60:39:ff:dc:f0:39:96:d3:db: 02:e5:64:8b:0f:ce:f8:f7:d7:67:fe:88:30:e8:b4: cc:2c:f5:d2:48:ef:49:a8:9b:4f:e0:39:db:f4:bf: 4b:cb:a5:f2:dd:fd:40:8c:e3:80:48:ad:9a:4e:05: 1b:68:07:13:be:d9:f9:56:b5:14:99:fd:88:57:69: ef:aa:e8:4d:1e:30:c3:6b:ec:8a:60:e2:f5:9f:2c: e0:5e:7b:ef:f0:41:0e:56:fc:07:ba:ef:83:9f:29: 30:ed:c1:04:c1:6a:c0:e6:68:ce:ea:33:f6:83:22: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EB:67:B5:20:DB:BD:CF:E5:02:D8:77:6B:21:36:78:70:ED:D4:DA X509v3 Authority Key Identifier: keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:e3:09:e2:56:f8:a8:0d:36:ec:6b:9e:ac:5a:cf:d8:d4:53: 6a:3b:4c:2f:f0:60:33:b0:e7:04:34:93:5a:e7:05:27:ae:9e: 3b:33:2b:65:17:ef:4a:ac:2d:6e:7f:cf:47:c7:ae:e4:87:50: cf:ef:73:88:51:dd:33:b0:35:9b:c8:e9:68:ca:cc:7e:7a:09: f6:c8:4e:c9:f1:32:e1:d6:d0:2a:66:04:ec:70:51:9e:58:1a: 83:9d:5a:3d:d5:1f:75:6d:35:8b:e4:fb:84:38:4a:e8:28:0e: 35:a0:bf:5b:8b:c5:fa:c9:96:97:ab:38:19:7b:c1:81:04:11: d5:62:2c:c7:2f:71:c2:9d:c3:98:51:d7:2f:82:fa:a5:61:1d: a0:54:5e:8e:ec:52:b7:05:73:b2:90:a3:c0:b2:c2:fb:74:ab: 01:35:36:6a:70:ab:53:ea:12:a6:3c:9b:d3:d9:40:f5:a8:d7: 74:40:21:36:e0:1b:ab:3d:26:5b:83:ab:1b:55:3b:d6:7c:cd: 22:b6:12:de:ad:07:6f:ec:39:df:ef:74:a9:0f:bb:63:58:d5: 7d:e1:c9:24:35:c3:b4:f7:f8:f2:1a:e3:db:8a:1c:a3:d9:e9: 37:34:81:3e:70:f7:5f:21:ba:16:8b:aa:57:68:24:07:88:b4: fb:a5:74:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZGMkMxMTAvBgNVBAUTKEZFM0RBMTdCNTRBNEQ0MkY3QzVDOUE4QTY3RDM3OTA2 N0E3NjA4MEUwHhcNMjQxMTIzMDAxMTUwWhcNMjQxMTMwMDAxMTUwWjAYMRYwFAYD VQQDEw02NzQxMWRjNi0wZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9km3I97T3/wngX9h2zI2SS9AW+jlIXNN4eS3PMXqbVVWfAnNuGdPDU7ZTxt 2VpgGk8ak1eLpMfSSd/zssxaO31J+P4bdlRgTX8vCY1hxoprOXs7Lh0MCCUljdyM O61qsJVvKHJUDID93XvPEvB3G5gXN9P+p1TkyFDY7BxWe/e7d9pBZ3hvfw7iw/Bg Of/c8DmW09sC5WSLD87499dn/ogw6LTMLPXSSO9JqJtP4Dnb9L9Ly6Xy3f1AjOOA SK2aTgUbaAcTvtn5VrUUmf2IV2nvquhNHjDDa+yKYOL1nyzgXnvv8EEOVvwHuu+D nykw7cEEwWrA5mjO6jP2gyJJhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3rZ7Ug 273P5QLYd2shNnhw7dTaMB8GA1UdIwQYMBaAFP49oXtUpNQvfFyaimfTeQZ6dggO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkYyQy9FRDM1NTZEQTVG MzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFDOThYSnFLWjlONUJucDJD QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qMmhlMVNrMUM5OFhKcUtaOU41Qm5wMkNBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkYyQy9FRDM1NTZEQTVGMzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFD OThYSnFLWjlONUJucDJDQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ4wniVvioDTbsa56sWs/Y1FNqO0wv8GAzsOcENJNa5wUnrp47Mytl F+9KrC1uf89Hx67kh1DP73OIUd0zsDWbyOloysx+egn2yE7J8TLh1tAqZgTscFGe WBqDnVo91R91bTWL5PuEOEroKA41oL9bi8X6yZaXqzgZe8GBBBHVYizHL3HCncOY UdcvgvqlYR2gVF6O7FK3BXOykKPAssL7dKsBNTZqcKtT6hKmPJvT2UD1qNd0QCE2 4BurPSZbg6sbVTvWfM0ithLerQdv7Dnf73SpD7tjWNV94ckkNcO09/jyGuPbihyj 2ek3NIE+cPdfIboWi6pXaCQHiLT7pXRp -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org